CVE-2022-3250

🗓️ 21 Sep 2022 16:55:14Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 83 Views

CVE-2022-3250 Sensitive Cookie in HTTPS Session Without 'Secure' Attribut

Reporter	Title	Published	Views	Family All 14
Huntr	Secure token is missed when ivalid URL is entered	20 Sep 202213:41	–	huntr
Circl	CVE-2022-3250	21 Sep 202220:41	–	circl
CNNVD	Rdiffweb 安全漏洞	21 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-3250 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb	21 Sep 202216:55	–	cvelist
EUVD	EUVD-2022-0236	3 Oct 202520:07	–	euvd
Github Security Blog	rdiffweb has insecure HTTP cookies	22 Sep 202200:00	–	github
NVD	CVE-2022-3250	21 Sep 202217:15	–	nvd
OSV	GHSA-M748-HJQG-RPP8 rdiffweb has insecure HTTP cookies	22 Sep 202200:00	–	osv
OSV	PYSEC-2022-287	21 Sep 202217:15	–	osv
Prion	Session fixation	21 Sep 202217:15	–	prion

NVD

Node

ikus-soft rdiffwebRange<2.4.6

[
  {
    "product": "ikus060/rdiffweb",
    "vendor": "ikus060",
    "versions": [
      {
        "lessThan": "2.4.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]